CVE-2018-25237: belden hirschmann hisecos classic firewall (eagle, eagle one) Classic Buffer Overflow

Vulnerability summary

CVE-2018-25237 is a critical (CVSS 9.8) Classic Buffer Overflow vulnerability in belden hirschmann hisecos classic firewall (eagle, eagle one). EPSS estimates a 0.82% chance of exploitation in the next 30 days, higher than 56.4% of scored vulnerabilities.

Timeline

1. 03-04-2026
   PublishedVulnerability first disclosed.
2. 01-10-2026
   Last modifiedVulnerability information updated.

Description

Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled that allows remote attackers to crash the device or execute arbitrary code by submitting a password longer than 128 characters. Attackers can exploit improper bounds checking in password handling to overflow a fixed-size buffer and achieve denial of service or remote code execution.

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.